windows-itpro-docs/windows/keep-secure/turn-on-windows-firewall-and-configure-default-behavior.md

title, description, ms.assetid, ms.prod, ms.mktglfcycl, ms.sitesec, ms.pagetype, author

title	description	ms.assetid	ms.prod	ms.mktglfcycl	ms.sitesec	ms.pagetype	author
Turn on Windows Firewall and Configure Default Behavior (Windows 10)	Turn on Windows Firewall and Configure Default Behavior	3c3fe832-ea81-4227-98d7-857a3129db74	w10	deploy	library	security	brianlic-msft

Turn on Windows Firewall and Configure Default Behavior

Applies to

• Windows 10
• Windows Server 2016

To enable Windows Firewall and configure its default behavior, use the Windows Firewall with Advanced Security node in the Group Policy Management console.

Administrative credentials

To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs.

To enable Windows Firewall and configure the default behavior

1. Open the Group Policy Management Console to Windows Firewall with Advanced Security.

2. In the details pane, in the Overview section, click Windows Firewall Properties.

3. For each network location type (Domain, Private, Public), perform the following steps.

   Note:  The steps shown here indicate the recommended values for a typical deployment. Use the settings that are appropriate for your firewall design.

   1. Click the tab that corresponds to the network location type.

   2. Change Firewall state to On (recommended).

   3. Change Inbound connections to Block (default).

   4. Change Outbound connections to Allow (default).